STACKITGit/cli
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix command

Browse source 
Signed-off-by: Meredith Lancaster <malancas@github.com>
This commit is contained in:
Meredith Lancaster 2024-03-06 13:35:55 -07:00
parent 1a7fa8e37f
commit 9b9ddcd1da
1 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
test/integration/attestation-cmd/download-and-verify-package-attestation.sh
View file

@ -20,16 +20,18 @@ curl -s $packageURL -o $packageFile
curl -s $attestationURL | jq '.attestations[1].bundle' > $attestationFile
# Verify the package with the --owner flag
$ghVerifyBuildPath $packageFile -b $attestationFile --digest-alg=sha512 --owner=sigstore
$ghBuildPath attestation verify $packageFile -b $attestationFile --digest-alg=sha512 --owner=sigstore
if [ $? -ne 0 ]; then
# cleanup test data
echo "Failed to verify package with --owner flag"
rm $packageFile $attestationFile
exit 1
fi
$ghVerifyBuildPath $packageFile -b $attestationFile --digest-alg=sha512 --repo=sigstore-js
$ghBuildPath attestation verify $packageFile -b $attestationFile --digest-alg=sha512 --repo=sigstore-js
if [ $? -ne 0 ]; then
# cleanup test data
echo "Failed to verify package with --repo flag"
rm $packageFile $attestationFile
exit 1
fi